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LISTING OF CLAIMS 

What is claimed is: 

1 - (original) A method comprising: 

differentiating at least one service class in a kernel to perform service differentiation based on 
content in at least one data packet, including the steps of: 

capturing said at least one data packet until a complete application header is detected; 
parsing said complete application header to determine at least one application tag; 
matching said at least one application tag to at least one matching rule; 
detennining a presence of at least one match with said at least one matching rule; and 
performing service differentiation action based on said at least one matching rale. 

2. (original) A method as in claim I, wherein said at least one application tag includes at least 
one tag taken from a group of tags including: URI, cookie, request method, HTTP version, a tag 
in an application protocol, and a tag in a communication protocol. 

3. (currently amended) A method as in claim L wherein mM „, frg onft am ^ nn ^ fa , 
USLand wherein the URI is the second string in a HTTP header and the cookie starts with a 
cookie delimiter as defined in an application protocol. 

4. (original) A method as in claim 1, further comprising employing a table having said at least 
one matching rule. 
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5. (original) A method as in claim 1, wherein the step of determining includes finding a best 
match. 

6. (original) A method as in claim 1 , wherein said step of performing service differentiation 
action includes at least one action taken from a group of actions including: dropping, rate 
controlling, scheduling connections, monitoring, request prioritization, and a policing action. 



7- (currently amended) A method as in claim 6 Uher a n.^^»f p ^. 



service 



differentiation action includes an action of drop ping ^ wherein said action G f dropping 
includes discarding a connection. 

8. (original) A method as in claim 6, wherein said action includes at least one act taken from a 
group of acts including: sending a reset message, sending an application return code, determining 
compliance with a given rate and/or burst, prioritization, weighted round robin, round robin, 
ordering, recording statistics, performing a cleanup, and protocol control. 

9. (original) A method as in claim 1 , further comprising installing at least one matching rule. 

10. (original) A method as in claim 1 , further comprising detecting establishment of a new 
connection. 



1 1 . (original) A method as in claim 1 0, wherein said step of detecting includes establishing of a 
new TCP connection. 



12. (original) A method as in claim 1 1, wherein said step of establishing of a new TCP 
connection includes: receiving SYN packet; sending SYN-ACK packet; deferring accept; 
receiving ACK for SYN-ACK packet; and deferring notification of data packet. 

13. (original) A method as in claim 1, wherein said step of capturing includes detecting 
application header delimiters for said at least one data packet. 
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14. (original) An apparatus comprising a service differentiation module including: 
a parser to parse a client Web request; 

a classifier to classify the request based on application headers and assigning a request class 
within a kernel; 

a selector to determine an action rule based on the request class; and 

a performer to apply the action rule based on the request class. 

15. (withdrawn) An apparatus comprising a policy agent, said policy agent including: 

a communicator to communicate from a user space to a kernel with an application interface; 
an initializer to instantiate service differentiation rules for an application tag within the kernel 
which include classification and action rules; and 

a manager to delete and update rules on a user request. 
16. (withdrawn) A method comprising: 
forming a rule, including the steps of: 

communicating from a user space to a kernel with an application interface; 

instantiating service differentiation rules for an application tag within the kernel which include 
classification and action rules; and 

deleting and adding rules based upon a user request. 
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17 . (withdrawn) A method as in claim 16, further comprising updating rules based upon a user 
request. 

18. (original) An article of manufacture comprising a computer 
usable medium having computer readable program code means 
embodied therein for causing service differentiation, the computer 
readable program code means in said article of manufacture 
comprising computer readable program code means for causing a 
computer to effect the steps of claim 1. 

19. (original) A program storage device readable by machine, 
tangibly embodying a program of instructions executable by the 
machine to perform method steps for service differentiation , said method 
steps comprising the steps of claim 1. 

20. (original) A computer program product comprising a computer 
usable medium having computer readable program code means 
embodied therein for causing service differentiation, the computer 
readable program code means in said computer program product 
comprising computer readable program code means for causing a 
computer to effect the functions of claim 14. 

21. (withdrawn) A computer program product comprising a computer 
usable medium having computer readable program code means 
embodied therein for causing rule installation, the computer 
readable program code means in said computer program product 
comprising computer readable program code means for causing a 
computer to effect the functions of claim 15. 

2 2 . (currently amended) An apparatus comprising: 
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means for differentiating at least one service class in a kernel to perform service differentiation 
based on content in at least one data packet, comprising: 

means for capturing said at least one data packet until a complete application header is detected; 

means for parsing said complete application header to determine at least one application tag; 

means for matching said at least one application tag to at least one matching rule; 

means for determining a presence of at least one match with said at least one matching rule; and 

means for performing service differentiation action based on said at least one matching rule, 
wherein at least one of said means is a tangible means 

23. (new) A computer program product comprising a computer usable 
medium having computer readable program code means embodied 
therein for causing differentiation of at least one service class in a kernel, the 
computer readable program code means in said computer program 
product comprising computer readable program code means for 
causing a computer to effect the functions of claim 22. 
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